ID CVE-2015-3159
Summary The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users to gain privileges.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:automatic_bug_reporting_tool:-:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:automatic_bug_reporting_tool:-:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 13-02-2023 - 00:47)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
redhat via4
rpms
  • abrt-0:2.1.11-22.ael7b_1
  • abrt-0:2.1.11-22.el7_1
  • abrt-addon-ccpp-0:2.1.11-22.ael7b_1
  • abrt-addon-ccpp-0:2.1.11-22.el7_1
  • abrt-addon-kerneloops-0:2.1.11-22.ael7b_1
  • abrt-addon-kerneloops-0:2.1.11-22.el7_1
  • abrt-addon-pstoreoops-0:2.1.11-22.ael7b_1
  • abrt-addon-pstoreoops-0:2.1.11-22.el7_1
  • abrt-addon-python-0:2.1.11-22.ael7b_1
  • abrt-addon-python-0:2.1.11-22.el7_1
  • abrt-addon-upload-watch-0:2.1.11-22.ael7b_1
  • abrt-addon-upload-watch-0:2.1.11-22.el7_1
  • abrt-addon-vmcore-0:2.1.11-22.ael7b_1
  • abrt-addon-vmcore-0:2.1.11-22.el7_1
  • abrt-addon-xorg-0:2.1.11-22.ael7b_1
  • abrt-addon-xorg-0:2.1.11-22.el7_1
  • abrt-cli-0:2.1.11-22.ael7b_1
  • abrt-cli-0:2.1.11-22.el7_1
  • abrt-console-notification-0:2.1.11-22.ael7b_1
  • abrt-console-notification-0:2.1.11-22.el7_1
  • abrt-dbus-0:2.1.11-22.ael7b_1
  • abrt-dbus-0:2.1.11-22.el7_1
  • abrt-debuginfo-0:2.1.11-22.ael7b_1
  • abrt-debuginfo-0:2.1.11-22.el7_1
  • abrt-desktop-0:2.1.11-22.ael7b_1
  • abrt-desktop-0:2.1.11-22.el7_1
  • abrt-devel-0:2.1.11-22.ael7b_1
  • abrt-devel-0:2.1.11-22.el7_1
  • abrt-gui-0:2.1.11-22.ael7b_1
  • abrt-gui-0:2.1.11-22.el7_1
  • abrt-gui-devel-0:2.1.11-22.ael7b_1
  • abrt-gui-devel-0:2.1.11-22.el7_1
  • abrt-gui-libs-0:2.1.11-22.ael7b_1
  • abrt-gui-libs-0:2.1.11-22.el7_1
  • abrt-libs-0:2.1.11-22.ael7b_1
  • abrt-libs-0:2.1.11-22.el7_1
  • abrt-python-0:2.1.11-22.ael7b_1
  • abrt-python-0:2.1.11-22.el7_1
  • abrt-python-doc-0:2.1.11-22.ael7b_1
  • abrt-python-doc-0:2.1.11-22.el7_1
  • abrt-retrace-client-0:2.1.11-22.ael7b_1
  • abrt-retrace-client-0:2.1.11-22.el7_1
  • abrt-tui-0:2.1.11-22.ael7b_1
  • abrt-tui-0:2.1.11-22.el7_1
  • libreport-0:2.1.11-23.ael7b_1
  • libreport-0:2.1.11-23.el7_1
  • libreport-anaconda-0:2.1.11-23.ael7b_1
  • libreport-anaconda-0:2.1.11-23.el7_1
  • libreport-cli-0:2.1.11-23.ael7b_1
  • libreport-cli-0:2.1.11-23.el7_1
  • libreport-compat-0:2.1.11-23.ael7b_1
  • libreport-compat-0:2.1.11-23.el7_1
  • libreport-debuginfo-0:2.1.11-23.ael7b_1
  • libreport-debuginfo-0:2.1.11-23.el7_1
  • libreport-devel-0:2.1.11-23.ael7b_1
  • libreport-devel-0:2.1.11-23.el7_1
  • libreport-filesystem-0:2.1.11-23.ael7b_1
  • libreport-filesystem-0:2.1.11-23.el7_1
  • libreport-gtk-0:2.1.11-23.ael7b_1
  • libreport-gtk-0:2.1.11-23.el7_1
  • libreport-gtk-devel-0:2.1.11-23.ael7b_1
  • libreport-gtk-devel-0:2.1.11-23.el7_1
  • libreport-newt-0:2.1.11-23.ael7b_1
  • libreport-newt-0:2.1.11-23.el7_1
  • libreport-plugin-bugzilla-0:2.1.11-23.ael7b_1
  • libreport-plugin-bugzilla-0:2.1.11-23.el7_1
  • libreport-plugin-kerneloops-0:2.1.11-23.ael7b_1
  • libreport-plugin-kerneloops-0:2.1.11-23.el7_1
  • libreport-plugin-logger-0:2.1.11-23.ael7b_1
  • libreport-plugin-logger-0:2.1.11-23.el7_1
  • libreport-plugin-mailx-0:2.1.11-23.ael7b_1
  • libreport-plugin-mailx-0:2.1.11-23.el7_1
  • libreport-plugin-reportuploader-0:2.1.11-23.ael7b_1
  • libreport-plugin-reportuploader-0:2.1.11-23.el7_1
  • libreport-plugin-rhtsupport-0:2.1.11-23.ael7b_1
  • libreport-plugin-rhtsupport-0:2.1.11-23.el7_1
  • libreport-plugin-ureport-0:2.1.11-23.ael7b_1
  • libreport-plugin-ureport-0:2.1.11-23.el7_1
  • libreport-python-0:2.1.11-23.ael7b_1
  • libreport-python-0:2.1.11-23.el7_1
  • libreport-rhel-0:2.1.11-23.ael7b_1
  • libreport-rhel-0:2.1.11-23.el7_1
  • libreport-rhel-anaconda-bugzilla-0:2.1.11-23.ael7b_1
  • libreport-rhel-anaconda-bugzilla-0:2.1.11-23.el7_1
  • libreport-rhel-bugzilla-0:2.1.11-23.ael7b_1
  • libreport-rhel-bugzilla-0:2.1.11-23.el7_1
  • libreport-web-0:2.1.11-23.ael7b_1
  • libreport-web-0:2.1.11-23.el7_1
  • libreport-web-devel-0:2.1.11-23.ael7b_1
  • libreport-web-devel-0:2.1.11-23.el7_1
  • abrt-0:2.0.8-26.el6_6.1
  • abrt-addon-ccpp-0:2.0.8-26.el6_6.1
  • abrt-addon-kerneloops-0:2.0.8-26.el6_6.1
  • abrt-addon-python-0:2.0.8-26.el6_6.1
  • abrt-addon-vmcore-0:2.0.8-26.el6_6.1
  • abrt-cli-0:2.0.8-26.el6_6.1
  • abrt-console-notification-0:2.0.8-26.el6_6.1
  • abrt-debuginfo-0:2.0.8-26.el6_6.1
  • abrt-desktop-0:2.0.8-26.el6_6.1
  • abrt-devel-0:2.0.8-26.el6_6.1
  • abrt-gui-0:2.0.8-26.el6_6.1
  • abrt-libs-0:2.0.8-26.el6_6.1
  • abrt-python-0:2.0.8-26.el6_6.1
  • abrt-tui-0:2.0.8-26.el6_6.1
  • libreport-0:2.0.9-21.el6_6.1
  • libreport-cli-0:2.0.9-21.el6_6.1
  • libreport-compat-0:2.0.9-21.el6_6.1
  • libreport-debuginfo-0:2.0.9-21.el6_6.1
  • libreport-devel-0:2.0.9-21.el6_6.1
  • libreport-filesystem-0:2.0.9-21.el6_6.1
  • libreport-gtk-0:2.0.9-21.el6_6.1
  • libreport-gtk-devel-0:2.0.9-21.el6_6.1
  • libreport-newt-0:2.0.9-21.el6_6.1
  • libreport-plugin-bugzilla-0:2.0.9-21.el6_6.1
  • libreport-plugin-kerneloops-0:2.0.9-21.el6_6.1
  • libreport-plugin-logger-0:2.0.9-21.el6_6.1
  • libreport-plugin-mailx-0:2.0.9-21.el6_6.1
  • libreport-plugin-reportuploader-0:2.0.9-21.el6_6.1
  • libreport-plugin-rhtsupport-0:2.0.9-21.el6_6.1
  • libreport-python-0:2.0.9-21.el6_6.1
refmap via4
confirm
Last major update 13-02-2023 - 00:47
Published 14-01-2020 - 18:15
Last modified 13-02-2023 - 00:47
Back to Top